04384nam a22005655i 4500 979-8-8688-0193-8 DE-He213 20251030112241.0 cr nn 008mamaa 240529s2024 xxu| s |||| 0|eng d 9798868801938 979-8-8688-0193-8 10.1007/979-8-8688-0193-8 doi QA76.76.M52 UMP bicssc COM051380 bisacsh UMP thema Easttom, Chuck. author. aut http://id.loc.gov/vocabulary/relators/aut 77764 Windows Forensics [electronic resource] : Understand Analysis Techniques for Your Windows / by Chuck Easttom, William Butler, Jessica Phelan, Ramya Sai Bhagavatula, Sean Steuber, Karely Rodriguez, Victoria Indy Balkissoon, Zehra Naseer. 1st ed. 2024. Berkeley, CA : Apress : Imprint: Apress, 2024. XXIII, 470 p. 300 illus. online resource. text txt rdacontent computer c rdamedia online resource cr rdacarrier text file PDF rda Chapter 1: Introduction to Windows -- Chapter 2: Forensics Concepts -- Chapter 3: Creating Forensic Images Using OSForensics, FTK Imager, and Autopsy -- Chapter 4: Windows File Artifacts -- Chapter 5: Windows Registry Part 1 -- Chapter 6: Windows Registry Part 2 -- Chapter 7: Windows Shadow Copy -- Chapter 8: Windows Memory Forensics -- Chapter 9: PowerShell Forensics -- Chapter 10: Web Browser Forensics -- Chapter 11: Windows Email Forensics -- Chapter 12: Microsoft Azure and Cloud Forensics -- Chapter 13: Data-Hiding Techniques in Windows -- Appendix A: Volatility Cheat Sheet -- Appendix B: Windows Registry Cheat Sheet. This book is your comprehensive guide to Windows forensics. It covers the process of conducting or performing a forensic investigation of systems that run on Windows operating systems. It also includes analysis of incident response, recovery, and auditing of equipment used in executing any criminal activity. The book covers Windows registry, architecture, and systems as well as forensic techniques, along with coverage of how to write reports, legal standards, and how to testify. It starts with an introduction to Windows followed by forensic concepts and methods of creating forensic images. You will learn Windows file artefacts along with Windows Registry and Windows Memory forensics. And you will learn to work with PowerShell scripting for forensic applications and Windows email forensics. Microsoft Azure and cloud forensics are discussed and you will learn how to extract from the cloud. By the end of the book you will know data-hiding techniques in Windows and learn about volatility and a Windows Registry cheat sheet. What Will You Learn Understand Windows architecture Recover deleted files from Windows and the recycle bin Use volatility and PassMark volatility workbench Utilize Windows PowerShell scripting for forensic applications. Microsoft software. Microsoft .NET Framework. Microsoft. Butler, William. author. aut http://id.loc.gov/vocabulary/relators/aut 77765 Phelan, Jessica. author. aut http://id.loc.gov/vocabulary/relators/aut 77766 Sai Bhagavatula, Ramya. author. aut http://id.loc.gov/vocabulary/relators/aut 77767 Steuber, Sean. author. aut http://id.loc.gov/vocabulary/relators/aut 77768 Rodriguez, Karely. author. aut http://id.loc.gov/vocabulary/relators/aut 77769 Indy Balkissoon, Victoria. author. aut http://id.loc.gov/vocabulary/relators/aut 77770 Naseer, Zehra. author. aut http://id.loc.gov/vocabulary/relators/aut 77771 SpringerLink (Online service) Springer Nature eBook Printed edition: 9798868801921 Printed edition: 9798868801945 Printed edition: 9798868805653 https://doi.org/10.1007/979-8-8688-0193-8 ZDB-2-CWD ZDB-2-SXPC 60262 60262